Supervisor Threat Hunting - Cyber Security & TSOC - Wadsworth Sys Control Center

FirstEnergy - Wadsworth, OH

Full-time - Senior

Wadsworth, OH

10,001+ employees

Utilities

About the position

The Supervisor of Threat Hunting at FirstEnergy is responsible for leading a team of threat hunters to identify, analyze, and mitigate cyber threats. This role involves developing and implementing threat hunting strategies, overseeing daily operations, and advising IT and Cyber leadership on emerging threats. The position requires strong leadership and communication skills to enhance the security posture of the organization and maintain effective collaboration across various security teams.

Responsibilities

• Oversee a portfolio of Threat Intelligence, threat emulation, and associated platforms/tools essential to critical security processes.
• Ensure security tools are resilient, redundant, secure, and scalable for growth.
• Partner with the Manager, TSOC Operations and Supervisor, TSOC to ensure continued operations of 24x7 monitoring.
• Research, evaluate, design, engineer, and proof-of-concept both commercial and Open-Source tools.
• Educate and influence IT, Cyber Security, and Business stakeholders on existing security risks and best practices.
• Manage a team of threat hunters acting as cybersecurity subject matter experts (SME) to support the TSOC.
• Re-evaluate current controls and recommend best practices based on new information in the evolving threat landscape.
• Drive technology strategy and enterprise architecture for TSOC Operations.
• Develop, document, and recommend plans for investing in IT security, including cost trade-offs.
• Identify gaps in controls or visibility to assist in driving future strategy.
• Develop and present business cases and security architecture plans to management.
• Identify process improvements to advance security operations.
• Make recommendations for new technologies to support cybersecurity activities.
• Assist in providing investigation services and coordinate mitigation efforts during incidents.
• Build and maintain relationships with key business unit areas within Cyber, IT, Transmission, and Corporate Security.
• Research and maintain knowledge of current technologies and best practices.
• Participate with cross-functional team members in issue identification and solution development for cybersecurity projects.
• Assist with incident response for operational and cybersecurity-related issues.
• Maintain a high level of technical knowledge of platforms supported by attending webinars, conferences, and workshops.
• Provide input to contract negotiations for required software, hardware, and consulting.
• Support and maintain compliance with various NERC CIP standards to protect the BES for FirstEnergy.
• Mentor and motivate a distributed team that scales and evolves with security and technology needs.
• Manage staff performance by setting objectives, tracking performance, and providing feedback.
• Assist in the personal growth of staff through individual development plans, mentoring, coaching, and stretch job assignments.

Requirements

• Bachelor's Degree in Cybersecurity, Computer Science, Information Security, or similar discipline with 7+ years of significant experience in key technical domains.
• Strong leadership and excellent oral and written communication skills.
• Ability to communicate complex and technical issues to diverse audiences.
• Strong analytical and problem-solving skills.
• Ability to work with highly confidential information.
• Demonstrated understanding of best practices in system and application management.
• Ability to effectively manage multiple tasks concurrently.
• Experience developing or working with diverse teams and building an inclusive work environment.
• Demonstrated understanding of best practices in cybersecurity and how they relate to IT operations.
• Experience making strategic design decisions derived from risk-based, threat analysis.

Nice-to-haves

• Experience with Threat Intelligence platforms, SOAR, Microsoft Azure, Privileged Access Management (PAM), and Identity Management.
• Certifications such as CISSP, CISM, GCIH, or SANS.
• Knowledge of relevant frameworks, standards, and best practices such as NIST CSF, PCI-DSS, CIS CSCs, MITRE ATT&CK, Cyber Kill Chain.
• Experience in IT systems and/or networking infrastructure.
• In-depth understanding of TCP/IP network fundamentals.
• Experience with Compliance regulations, such as NERC CIP.

Benefits

• Health insurance
• Dental insurance
• Tuition reimbursement
• Vision insurance
• 401(k) matching
• Life insurance